Hacker News
- How I nearly almost saved the Internet, starring afl-fuzz and dnsmasq https://blog.skullsecurity.org/2015/how-i-nearly-almost-saved-the-internet-starring-afl-fuzz-and-dnsmasq 27 comments
- Guide: writing base64 (or alphanumeric) shellcode, in detail [OC] https://blog.skullsecurity.org/2017/solving-b-64-b-tuff-writing-base64-and-alphanumeric-shellcode 3 comments netsec
- Blogpost: going the other way with padding oracles: Encrypting arbitrary data! [OC] https://blog.skullsecurity.org/2016/going-the-other-way-with-padding-oracles-encrypting-arbitrary-data 6 comments netsec
- Blog post: Why DNS is awesome and why you should love it [OC] https://blog.skullsecurity.org/2015/if-youre-a-pentester-you-should-love-dns 21 comments netsec
- New release: first beta of dnscat2! [OC] https://blog.skullsecurity.org/2015/dnscat2-beta-release 23 comments netsec
- Exploiting a use-after-free vulnerability in the Defcon Qualifiers CTF ("shitsco") [OC] https://blog.skullsecurity.org/2014/defcon-quals-writeup-for-shitsco-use-after-free-vuln 4 comments netsec
- Writeup for Ghost in the Shellcode's "TI-1337" level: a walkthrough of exploiting a buffer underflow in a 64-bit app [OC] https://blog.skullsecurity.org/2014/ghost-in-the-shellcode-ti-1337-pwnable-100 8 comments netsec
- In-depth malware: Unpacking the ‘lcmw’ Trojan [OC] https://blog.skullsecurity.org/2014/in-depth-malware-unpacking-the-lcmw-trojan 12 comments netsec